Legal
Privacy Policy
Last updated: May 2026
Your data belongs to you. This policy tells you exactly what we collect, how we use it, and what we will never do with it. No fine print. No fuzzy language.
Information We Collect
Account information
When you create an account, we collect your name, email address, and payment information. Payment processing is handled by Stripe... we do not store your full payment card details on our servers.
Content you submit
To use The Messaging Lab, you submit information about your business, your voice, your audience, and the copy you want to create. This includes your Messaging Voice & Tone Guide, your Brand Guide, and the prompts you submit to the CONNECT AI.
Usage data
We collect information about how you use the platform... which features you use, how often, what copy types you generate. This helps us improve the product and understand what's working. Usage data is collected through our infrastructure providers and analytics tools.
Device and connection data
When you visit the platform, we automatically receive information like your IP address, browser type, operating system, device identifiers, and referring URL. This is standard for web services and helps us secure the platform and diagnose issues.
Communications
If you contact us for support, participate in live Q&A sessions, or communicate with us in any way, we may retain those communications to improve our service.
How We Use Your Information
To provide the service
We use your information to operate The Messaging Lab, generate your copy, maintain your guides, deliver the features in your subscription, and process payments.
To improve the platform
Aggregated, de-identified usage data helps us understand which features are most valuable and where to invest. We do not use your specific content to improve our AI models.
To communicate with you
We use your email address to send product updates, billing information, security alerts, and... with your permission... educational content and marketing communications. You can unsubscribe from marketing emails at any time.
Legal and safety
We may use your information to comply with legal obligations, enforce our terms, protect our rights, and prevent fraud or abuse of the platform.
AI Processing and Your Data
What is sent to the AI
When you submit a prompt to the CONNECT AI, that prompt... along with relevant sections of your Messaging Guide and Brand Guide... is sent to our AI provider (Anthropic) for processing. This happens in real time and is subject to Anthropic's commercial terms, which prohibit training on customer content.
We do not train AI on your content
Your prompts, your Messaging Guide, your Brand Guide, and the copy you generate are not used to train our AI models or any third-party AI models. Your content is processed to produce your output and is then retained only as described in our Data Retention section.
Your guides are private
Your Messaging Voice & Tone Guide and Brand Guide are stored securely on our servers and used exclusively to personalize your CONNECT AI output. They are not shared with other users or used for any purpose other than generating your copy.
Third-Party Service Providers
We share limited information with trusted service providers who help us operate the platform. Each is contractually bound to use your information only to provide services to us. Our current providers are:
Stripe
Payment processing. Stripe receives your name, email, and payment card information when you subscribe.
Anthropic
AI processing. Anthropic receives your prompts and relevant sections of your guides to generate your copy. Under their commercial terms, they do not train models on this data.
Vercel
Hosting and content delivery. Vercel receives standard web traffic data to serve the platform.
Supabase
Database and authentication. Supabase stores your account information, guides, and copy library.
Resend
Transactional email. Resend handles delivery of trial confirmations, billing notifications, and account communications.
Analytics
We use privacy-conscious analytics tools to understand platform usage in aggregate. These tools do not identify individual users.
Data Retention
Active accounts
While your account is active, we retain your account information, your guides, and your generated copy history so you can access them.
After cancellation
After you cancel, we retain your data for 30 days to allow for reactivation. After 30 days, your account data and content are permanently deleted from our active systems. Backup copies may persist for up to 90 additional days before being purged from backup storage.
Requesting deletion
You may request immediate deletion at any time by contacting hello@messaginglab.ai. We will process the request within 30 days unless we are required by law to retain certain information.
Your Rights
Depending on where you live, you may have specific rights regarding your personal information. Regardless of location, you have the following baseline rights with The Messaging Lab:
Access
You may request a copy of the personal information we hold about you.
Correction
You may correct inaccurate information directly in your account settings, or contact us for help.
Deletion
You may request deletion of your personal information. Contact us at hello@messaginglab.ai.
Portability
You may request export of your content in a machine-readable format.
Marketing opt-out
You may opt out of marketing communications at any time using the unsubscribe link in any marketing email.
European Users (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) gives you additional rights regarding your personal data.
Legal basis for processing
We process your personal data on the following legal bases: (a) performance of our contract with you (to provide the service); (b) your consent (for marketing communications); (c) our legitimate interests (to improve the platform, ensure security, prevent fraud); and (d) compliance with legal obligations.
Your GDPR rights
You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact hello@messaginglab.ai.
Data Protection Officer
Inquiries about how we handle personal data can be directed to hello@messaginglab.ai.
California Users (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you specific rights regarding your personal information.
Your California rights
You have the right to know what personal information we collect, to access it, to delete it, to correct it, to opt out of any sale or sharing (we do not sell or share personal information for cross-context behavioral advertising), and to non-discrimination for exercising your rights.
How to exercise your rights
Contact us at hello@messaginglab.ai. We will respond within 45 days. We may need to verify your identity before processing certain requests.
Categories of information collected
In the past 12 months, we may have collected the following categories: identifiers (name, email, IP address), commercial information (subscription details), internet activity (usage data), and content you provide (prompts, guides, generated copy). Details are described in the sections above.
International Data Transfers
The Messaging Lab is operated from the United States, and our service providers may process data in the United States and other countries. If you access the platform from outside the United States, your information will be transferred to, stored in, and processed in the United States and other jurisdictions, which may have different data protection laws than your country.
Safeguards
For transfers from the EEA, UK, and Switzerland, we rely on appropriate safeguards including Standard Contractual Clauses with our service providers where required.
Security
We use industry-standard security practices to protect your data... including encryption in transit and at rest, access controls, secure authentication, and regular security reviews. No system is completely secure, but we treat your data with the care it deserves.
Reporting security issues
If you discover a security vulnerability in The Messaging Lab, please report it to hello@messaginglab.ai. We take security reports seriously and will respond within 24 hours.
Breach notification
In the unlikely event of a data breach affecting your personal information, we will notify you and applicable regulatory authorities as required by law... typically within 72 hours of discovery.
Children's Privacy
The Messaging Lab is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18, and the service is not directed to children. In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect information from children under 13. If you believe a minor has provided us with personal information, contact hello@messaginglab.ai and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email to active subscribers and posted at the top of this page with an updated "Last updated" date. Continued use of The Messaging Lab after changes take effect constitutes your acceptance of the updated policy.
Contact
Questions about this Privacy Policy, requests to exercise your rights, or any privacy-related inquiries can be sent to hello@messaginglab.ai. We will respond as quickly as possible and within any timeframes required by applicable law.
Questions about how we handle your data?
hello@messaginglab.ai →